Skepticism

EVENTS

Bruce Schneier is blessed in his enemies

A critic calls out Schneier on CNN iReports. He thinks Scheier is a phony with no serious credentials, and doesn’t like all this criticism of the NSA. He also detests irony, I think.

Weeks of research regarding Mr. Schneier’s claims have highlighted one of the most frustrating problems with the internet age. Because virtually anyone lacking serious journalistic credentials can, and often does, write or post freely on any subject, the resulting sheer volume of information available may lead people to believe that the reporting is even-handed and well-researched. Unfortunately, in many circumstances nothing can be farther from the truth.

Comments

That’s a weird article.
The by-line goes to someone called JacquesTetu, but is then credited to someone called Richard H.L. Marshall.
This guy appears to be a serious security guy, but the article is gibberish and the author can’t form a sentence let alone code a link. And then the links seem to be mostly about him calling out Schneier for criticising “his” cryptography system (I think. I skimmed quickly).

If it is him he appears to be a cranky security woo salesman with an axe to grind coz Bruce gave short shrift to his miracle cure.

What are “journalistic credentials”? Does Bruce’s incredibly popular and insightful blog count? Or how about his very popular textbooks such as “Applied Cryptography” and “Secrets and Lies”? Bruce has an excellent reputation in the security arena because he learns, explains, teaches, and even occasionally updates his opinion. He’s been a good advocate and spokesperson (though I think he’s often too nice) for security.

I didn’t know that Bruce was fond of Voltaire’s prayer, but it does seem to have been granted in this case.

This is a sort of ad-hominem praise of Bruce Schneier: the TSA managed to get him disinvited from testifying before Congress about the TSA.

Schneier is the guy who a decade ago pointed out that the security checkpoints the TSA set up at airports are not secure and are prime targets for terrorism. The TSA ignored him, to completely predictable, tragic results in LA the other day. And now the TSA will ramp up their security theater with more reactionary measures that won’t prevent the problem.

The article was itself exactly the kind of self-promotion it accuses Schneier’s blog of being, and then goes on to justify the TSA and other agencies overreaching their mandates. Mister Kettle…

The article has been flagged as inappropriate and techdirt.com has a rebuttal. There is some hope…

Schneier has taught me a lot about ways to make myself actually more secure, with a lot less security theatre and a lot more effectiveness. Are there things he might do better? Probably. But I’m fairly sure he’s not running for Pope, so his infallibility isn’t an issue for me. I assume that he’s human, and will make a mistake or two, even in the fields he knows so well. I seek to apply the principles he proposes, rather than assuming that every word about an implementation thereof is going to become gospel-worthy.

Yep, Schneier is someone whose opinion weighs heavily with me when it comes to security. Copy of Applied Cryptography sitting right there above me on the shelf too. And let’s just say I’m not too shabby at the programming game myself. Been doing it since 1974, and just *might* know a thing or two ;-)

That’s definitely the most inept ad-hominem attack I’ve seen in a while: Create a sock-puppet account on a CNN blog (using the name of a character from a fictional novel you’ve written), then post a factually incorrect and barely coherent rant with links back to your company’s website all over it. All because your target called your magical crypto product snake-oil ten years ago.

Considering that the authors are the executives of Whitenoise Labs, they’ve just created their own PR disaster by demonstrating their inability to understand blogging, the internet, journalism, or journalistic integrity in a delightful example of the Dunning-Kruger effect.

Also, Bruce would agree that people should question what he writes. Look at it, see if it makes sense, decide whether you want to act on it even if you do believe it. He actually publishes cryptographic algorithms, for example.

What this person means isn’t “question,” it’s “disbelieve on my say-so.” Sorry. Not going to happen, even if I had never met Bruce in person.

Some people obviously have a severe problem with the message of Schneier’s book “liars and outliers”. A thriving society must be built on mutual trust, not on unfettered control by a couple of ruthless surveillance freaks. Otherwise it will break down. I cannot recommend this book enough.